HFE and BDDs: A Practical Attempt at Cryptanalysis

作者: Jean-Francis Michon , Pierre Valarcher , Jean-Baptiste Yunès

DOI: 10.1007/978-3-0348-7865-4_16

关键词:

摘要: HFE (Hidden Field Equations) is a public key cryptosystem using univariate polynomials over finite fields. It was proposed by J. Patarin in 1996. Well chosen parameters during the construction produce system of quadratic multivariate \({\mathbb{F}_2}\) as key. An enclosed trapdoor used to decrypt messages. We propose ciphertext-only attack which mainly consists satisfying boolean formula. Our algorithm based on BDDs (Binary Decision Diagrams), introduced Bryant 1986, allow represent and manipulate, possibly efficiently, functions. This paper devoted some experimental results we obtained while trying solve Patarin’s challenge. approach not successful, nevertheless it provided interesting information about security cryptosystem.

参考文章(11)
Joachim Von Zur Gathen, Jurgen Gerhard, Modern Computer Algebra ,(1999)
Tsutomu Matsumoto, Hideki Imai, Public quadratic polynomial-tuples for efficient signature-verification and message-encryption theory and application of cryptographic techniques. pp. 419- 453 ,(1988) , 10.1007/3-540-45961-8_39
Jacques Patarin, Hidden fields equations (HFE) and isomorphisms of polynomials (IP): Two new families of asymmetric algorithms theory and application of cryptographic techniques. pp. 33- 48 ,(1996) , 10.1007/3-540-68339-9_4
Bryant, Graph-Based Algorithms for Boolean Function Manipulation IEEE Transactions on Computers. ,vol. 35, pp. 677- 691 ,(1986) , 10.1109/TC.1986.1676819
Jacques Patarin, Cryptoanalysis of the Matsumoto and Imai Public Key Scheme of Eurocrypt'88 international cryptology conference. pp. 248- 261 ,(1995) , 10.1007/3-540-44750-4_20
Shin-ichi Minato, Nagisa Ishiura, Shuzo Yajima, Shared binary decision diagram with attributed edges for efficient Boolean function manipulation Conference proceedings on 27th ACM/IEEE design automation conference - DAC '90. pp. 52- 57 ,(1990) , 10.1145/123186.123225
Ingo Wegener, BDDs: design, analysis, complexity, and applications Discrete Applied Mathematics. ,vol. 138, pp. 229- 251 ,(2004) , 10.1016/S0166-218X(03)00297-X
Matthias Krause, BDD-based cryptanalysis of keystream generators Lecture Notes in Computer Science. pp. 222- 237 ,(2002)
A. Shamir, A. Kipuis, Cryptanalysis of the HFE public key cryptosystem by relinearization Lecture Notes in Computer Science. pp. 19- 30 ,(1999)